
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa
File: a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa (raw, json)
Hash identifier: 2pOCgABegi9FfA/bcNU5DXgRvBaBO6a0BUmIeCWl0Bg=
Subject key identifier: EA:76:CD:47:AB:71:4A:84:F7:42:E0:85:4F:9A:7D:1F:07:0B:2E:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4978FB9DB0D7CCBB6DCC63C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7015
IP address blocks: 70.88.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:78:fb:9d:b0:d7:cc:bb:6d:cc:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3e671ccc-595f-4dbe-b7fe-e5e2aba266a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:51:00:d6:6c:d6:a3:f7:c0:ae:db:3e:f2:
4d:07:3f:4a:90:dd:9f:3a:01:24:21:02:6d:a6:15:
8d:ff:a8:0a:d0:48:99:10:7b:ec:e0:f2:13:83:fe:
5d:26:e9:49:0e:00:e6:60:1f:e0:47:2f:ea:c0:00:
c6:ad:6f:60:27:13:04:aa:4f:94:fe:47:52:77:4c:
bc:df:9c:c8:59:90:ce:db:fd:a8:38:58:55:3d:c0:
df:ba:d3:b4:17:d7:b8:01:51:7d:7a:31:6f:6a:cd:
bd:66:0c:a2:cb:9e:04:a9:7d:f4:cf:aa:a2:74:6d:
26:9a:b6:36:5a:f8:3e:48:00:eb:55:5a:4d:ac:33:
26:62:e6:48:9c:4b:31:51:f6:be:da:20:e5:d0:96:
8a:06:4e:00:b8:46:4d:42:cd:ee:13:6a:05:fc:f6:
8f:9c:0d:63:19:d8:17:52:8f:2b:59:da:bd:b6:29:
63:dc:2f:40:1e:f2:ea:fa:c4:e0:36:0a:54:41:17:
09:cf:06:43:90:05:f4:e4:ad:c3:2b:00:2a:00:97:
66:7c:06:48:fb:c8:f6:3c:e0:82:60:3c:52:b2:8e:
d1:4c:52:06:9c:cb:1f:09:4d:e1:84:60:9e:3b:57:
d4:e2:af:0a:3e:9e:3a:46:28:e3:cd:da:92:41:89:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:CD:47:AB:71:4A:84:F7:42:E0:85:4F:9A:7D:1F:07:0B:2E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.88.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:88:e0:89:03:6b:ec:b8:fb:10:5f:bd:c3:e8:10:b8:84:19:
b7:96:8f:98:40:21:9c:5b:d3:2c:d7:e0:80:3a:c2:46:73:0c:
cb:ef:60:12:b2:ca:d8:3d:05:70:b6:e4:81:d6:2a:7f:56:14:
54:31:70:06:c3:e5:75:c4:4d:bb:fc:88:57:64:cf:ce:bc:62:
4a:12:42:ef:82:a3:73:cc:ac:51:11:6b:e0:45:90:c9:d9:37:
86:8a:93:43:0b:41:da:8f:89:3f:8d:c0:e6:08:08:34:68:97:
28:92:32:ac:45:f1:7f:e1:8a:09:45:9f:a8:a4:3c:76:49:f0:
5e:8a:7f:a7:2b:f4:5a:eb:d3:ad:e9:be:3a:7d:87:f5:d0:17:
59:b8:b3:f2:f7:b7:4d:27:c6:51:7e:51:1c:f7:4b:d9:96:88:
c3:19:17:15:d7:a9:d8:00:09:69:8f:6a:35:da:38:04:06:6c:
c7:15:99:99:a4:a4:26:7a:44:2e:b9:7c:7f:e7:6f:b7:3c:d0:
9b:56:7b:ef:e9:96:d3:ac:8d:1d:1a:c9:2c:74:49:ac:9b:45:
ef:12:07:b6:f6:19:5c:db:97:fc:06:68:2e:22:bd:d5:87:a1:
31:06:7e:10:91:81:a1:b1:f4:15:31:2c:bb:70:d3:99:ff:9e:
af:f1:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:19:59 2026 by rpki-client